DevSecOps Engineer
Motorola Solutions2 days ago
Cambridge, United KingdomMid Level
Responsibilities
- Build, maintain, and improve GitLab CI and TeamCity pipelines that build, test, scan, package, and release embedded Linux, Windows desktop, web, and firmware products.
- Implement automated security testing, including static analysis, dependency analysis, secret detection, dynamic testing, vulnerability scanning, and SBOM generation with quality gates and reporting.
- Triage scanner findings and CVEs, assess product impact, track remediation, and support security patch releases.
- Harden Linux-based product images and servers and produce technical evidence for customer and regulatory certification.
- Maintain and secure GitLab, TeamCity, Linux and Windows build agents, virtualized and cloud infrastructure, and internal package mirrors.
- Protect software supply chains through dependency pinning, trusted mirrors, artifact and release signing, access reviews, and secrets and key management.
- Review pipeline, infrastructure, and application changes and write runbooks, developer guides, and security documentation.
Requirements
- At least three years of experience in DevOps, DevSecOps, build/release, platform engineering, or equivalent CI/CD-focused software engineering.
- Strong hands-on experience administering and securing Linux systems, particularly Ubuntu or Debian, with shell scripting and networking fundamentals.
- Practical experience building and maintaining CI/CD pipelines with GitLab CI, TeamCity, Jenkins, GitHub Actions, or similar tools.
- Proficiency in Python and Bash for automation and tooling, using clean, maintainable code under version control with Git.
- Working knowledge of Docker, Dockerfiles, container images, registries, and containerized builds.
- Hands-on exposure to development-pipeline security tooling, CVE assessment, least privilege, secrets management, and patching.
- Preferred experience with regulated security standards including NIST SP 800-53, RMF, DISA STIGs, CIS Benchmarks, FIPS 140, ISO 27001, or Cyber Essentials Plus.
- Preferred experience with OWASP ZAP, OWASP Dependency-Check, Trivy, Semgrep, SonarQube, Nessus, OpenSCAP, CycloneDX, or SPDX.
- Preferred experience with Terraform, Ansible, Proxmox, VMware, self-hosted CI runners, AWS, Windows build agents, PowerShell, .NET, NuGet, code signing, and installers.
- Familiarity with C/C++, CMake, Rust, Cargo, JavaScript, TypeScript, embedded Linux packaging and image builds, cross-compilation, and kernel modules is desirable.
- A science or engineering degree in Computer Science, Electronics, or a similar field, or equivalent practical experience, is desirable.
- Strong problem-solving, written and verbal communication, collaboration, and ownership skills are required.
Benefits
- No travel is required.
- No relocation is provided.
- The position is classified as Experienced.
- The role includes a referral payment plan.
Tech Stack
AnsibleAWSBashCC++CMakeDockerGitGitHub ActionsGitLab CI/CDJavaScriptJenkinsLinux.NETPowerShellPythonRustSonarQubeTeamCityTerraformTypeScriptWindows
About Motorola Solutions
Motorola Solutions builds mission‑critical communications, video security and access control, body‑worn cameras, and command‑center software for public safety agencies and enterprises. It sells radios and LMR/P25 systems, cloud software, and managed services used by police, fire, and critical infrastructure operators. Headquartered in Chicago and publicly traded on the NYSE (MSI), the company was formed in 2011 after Motorola’s split and operates globally.